Archive
13 June 2023
Vulnerabilities first published on this day (UTC), newest first.
187 results · Feed
-
Medium 4.4
Code injection vulnerability exists in Chatwork Desktop Application (Mac) 2.6.43 and earlier. If this vulnerability is …
-
High 8.1
OS command injection vulnerability exists in WPS Office version 10.8.0.6186. If a remote attacker who can conduct a man…
-
Medium 5.5
Improper restriction of XML external entity reference (XXE) vulnerability exists in FRENIC RHC Loader v1.1.0.3 and earl…
-
High 7.8
Stack-based buffer overflow vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE…
-
Unscored —
Jiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, and Jiyu Kukan Toku-Toku coupon App for Android ver…
-
Critical 9.8
TP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain a stack overflow via the operation parameter at /admin/loca…
-
High 7.8
Out-of-bound reads vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE file, se…
-
Medium 5.3
ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388.23403 uses sensitive cookies without 'Secure' attribute. W…
-
Medium 5.3
An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all exis…
-
Unscored —
An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such tha…
-
High 7.2
OS command injection vulnerability exists in Wi-Fi AP UNIT allows. If this vulnerability is exploited, a remote authent…
-
Unscored —
An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and the…
-
Critical 9.8CVE-2023-31541 Public exploit
A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.…
-
High 7.5
Missing authentication for critical function in Wi-Fi AP UNIT allows a remote unauthenticated attacker to obtain sensit…
-
Critical 9.1
Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.
-
Medium 6.1
Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0
-
High 8.1
On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision c…
-
Critical 9.8
TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the device…
-
Critical 9.8
TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the key pa…
-
Medium 6.5
Race Condition within a Thread in it-novum/openitcockpit
Race Condition within a Thread in GitHub repository it-novum/openitcockpit prior to 4.6.5.
-
High 8.1CVE-2023-3224 EPSS 59%
Code Injection in nuxt/nuxt
Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3.
-
Critical 9.8
OS command injection vulnerability exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an a…
-
Critical 9.8
Improper authentication vulnerability exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, a…
-
High 7.2
CraftCMS version 3.7.59 is vulnerable to Server-Side Template Injection (SSTI). An authenticated attacker can inject Tw…
-
Critical 9.8
Hidden functionality issue exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary…
-
Critical 9.8
Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strin…
-
High 7.3
The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation.…